The steam api dll zmp File Malware Analysis

Technical Analysis

File Name	steam_api.dll_zmp
File Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.226.174
Database Version	2025-09-27 01:00:20 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	835b5521a90ed64eea2d0db8a19f0a91
SHA1	09ef0388c0ac68b8aff1fd2a520694477f58838f
SHA256	4d48f2902d56e3f923b4509ef3116751907e95384ea66b5dd2ee1a0c541306cc
SHA512	243a72c1db6d51d12bf5899514f32ba1e7042606172184d709b59df157e9fb2fe2e6b2ae5f6a40d5d2513ebe7c6142bd6ef7f1356acfd58f203281146442e579
ImpHash	a980a215cb1a456783eaf2c9e819773b

PE Analysis

Basic Information

▼

Icon	Hash: 70f5fc85f286be5e6b289b8e4e467490 Fuzzy: de59df9b95a5f6188a7c3086a2c57732 dHash: 33008dcc96d6e607
Image Base	`0x10000000`
Entry Point	`0x1003f71d`
Compilation Time	2015-08-18 00:42:26
Checksum	0x00000000 (Actual: 0x000f0b24)
OS Version	6.0
PEiD Signatures	`PE32 executable (DLL) (GUI) Intel 80386, for MS Windows`
PDB Path	`C:\Users\maurice\Documents\GitHub\SteamBase\Bin\Release\steam_api.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	8 libraries KERNEL32, USER32, ADVAPI32, WININET, SHLWAPI, WS2_32, dbghelp, CRYPT32
Exports	35 functions
Resources	8 Resources
Sections	10 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	453,463 bytes	453,632 bytes	6.68 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`29895B3FD1C99B287D834D799384910F`
`.text1`	`0x00070000`	7,872 bytes	8,192 bytes	5.87 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`0C45830B60A7FDD8F46284F62A2097BF`
`.rdata`	`0x00072000`	84,818 bytes	84,992 bytes	5.36 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`50E03DAA3D912B2466530647A355C1D4`
`.data`	`0x00087000`	89,756 bytes	27,648 bytes	4.27 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`97AA4A8E248CF8AA949D430B2C315F69`
`.data1`	`0x0009d000`	65,032 bytes	65,536 bytes	1.85 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`2A548B77BA4E46FF583A103829E87500`
`.debug_o`	`0x000ad000`	29,580 bytes	29,696 bytes	4.21 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D43DBE2D278E440CA0AFFB0D283D1BF0`
`.trace`	`0x000b5000`	2,176 bytes	2,560 bytes	5.29 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D12B7CA9122A4723FD79D3658F072F45`
`_RDATA`	`0x000b6000`	1,344 bytes	1,536 bytes	4.55 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`941167C8F196E4C53DB4F47DDC9AC1F2`
`.rsrc`	`0x000b7000`	215,616 bytes	216,064 bytes	0.95 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`41BE69CF43037232D92FFE7A4746BF20`
`.reloc`	`0x000ec000`	30,328 bytes	30,720 bytes	6.56 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`036648B7C81441872B44F8128E7E0700`

Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 8 (215,104 bytes)

Resource Type	Count	Total Size	Percentage
RT_BITMAP	1	115,242 bytes	53.6%
RT_ICON	5	99,592 bytes	46.3%
RT_DIALOG	1	194 bytes	0.1%
RT_GROUP_ICON	1	76 bytes	0%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The steam_api.dll_zmp File Analysis

Technical Analysis

Clean File